Duncan Aviation has achieved formal compliance with the US Department of Defence’s (DoD) Cybersecurity Maturity Model Certification (CMMC) framework, strengthening its capabilities to support defence customers through secure aircraft maintenance, modifications, and manufacturing services.
The certification places Duncan Aviation among a select group of US aerospace companies that hold both CMMC compliance and the AS9100 aerospace quality management standard, enabling the company to continue bidding on and executing defence contracts involving depot-level maintenance, aircraft modifications, and parts manufacturing and repair.
With the certification, Duncan Aviation is now listed in the federal System for Award Management (SAM.gov) database, qualifying it to participate in DoD programmes requiring enhanced cybersecurity compliance.
The certification is expected to significantly expand the capabilities of Duncan Manufacturing Solutions (DMS), the company’s manufacturing division. While Duncan Aviation is widely recognised for its business aviation MRO services, DMS will now be positioned to compete for larger-scale military production programmes in addition to manufacturing replacement components.
Also Read – Turkish Technic expands Avionics MRO capabilities with GE Aerospace partnership
The CMMC framework was established by the DoD to safeguard Controlled Unclassified Information (CUI), including technical drawings, engineering data and other sensitive defence-related information shared with contractors. The certification builds upon the cybersecurity requirements outlined in NIST SP 800-171, requiring organisations to demonstrate both digital and physical safeguards for protecting sensitive information.
As part of its compliance programme, Duncan Aviation has enhanced the security of its DMS facilities by establishing controlled workspaces for defence projects. Access to these areas is restricted to authorised personnel, with strict entry controls and monitoring procedures implemented to protect sensitive customer and programme data.
The company said these investments strengthen its ability to support defence customers by ensuring secure handling of technical information throughout aircraft maintenance, component manufacturing, repair and modification activities.
The achievement reflects the growing importance of cybersecurity compliance within the aerospace MRO sector, as defence organisations increasingly require maintenance providers and manufacturing partners to meet stringent standards for information security alongside operational and quality excellence.
